Privacy Policy
- Last updated
- 15 November 2026
- What changed
- First published version.
Summary
- We collect an email address, the account details you enter, and your saved searches and settings.
- The site has no advertising, no analytics scripts and no tracking. It sets one cookie, and only when you sign in.
- We do not sell personal data. A small number of service providers process it for us, and they are named below.
- You can delete your account yourself at any time, and you can ask us for a copy of your data.
This summary is a guide. It is not part of the document, and the numbered sections below prevail.
1.Who We Are
Space Tenders is operated by an individual, whose legal name is given on request and will be published here before paid plans open. The operator is the data controller for the personal data described in this Privacy Policy.
This policy covers spacetenders.com, the feed, the weekly digest and email you exchange with us. It forms part of the Terms of Service.
2.Personal Data We Collect
We collect the following data, for the purposes and on the legal bases shown.
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, and name and company if you give them | To create and run your account and to contact you about it | Contract |
| Password, stored only as a salted scrypt hash | To sign you in | Contract |
| Saved searches, chosen categories, email time and time zone | To show the feed and send the emails you asked for | Contract |
| Account dates: created, last sign in, end of free trial | To run the free trial and keep the account secure | Contract; legitimate interests |
| Plan and subscription status | To give access to what you paid for | Contract |
| Email address on the free digest list | To send the weekly digest | Consent |
| Messages you send us | To answer you and keep a record of the exchange | Legitimate interests |
| Hashed sign in attempt counters and host request logs, which include IP addresses | To prevent password guessing and to diagnose faults | Legitimate interests |
We collect this data from you directly. We do not obtain personal data about you from third parties.
You are not obliged to provide personal data, but without an email address we cannot create an account or send the digest.
3.What We Do Not Collect
The site carries no advertising, no analytics scripts and no tracking pixels. We do not build a profile of which notices you read, and we do not buy or sell personal data.
We do not receive or store card numbers. Payment details are collected by the payment provider.
We do not make decisions about you by automated means that have legal or similarly significant effects.
4.Cookies
The site sets one cookie, scf_session, when you sign in. It holds a random token that keeps you signed in for up to 30 days and is removed when you sign out.
The cookie is strictly necessary for the service you asked for, so no consent banner is shown. Visitors who do not sign in receive no cookie from us.
5.Automated Summaries
Notice summaries are written by a language model. The model receives the text of public government notices only. It does not receive account data, saved searches or any other personal data about our users.
A public notice may name an agency contact officer. That information is published by the agency, and it may appear in the text of the notice.
6.Service Providers
These providers process personal data on our behalf, under their own data protection terms.
| Provider | Role | Data |
|---|---|---|
| Cloudflare, Inc. | Website hosting, database and network security | All account data; request logs |
| Resend | Email delivery, from the date email delivery starts | Email address and message content |
| Payment provider, to be named here before checkout opens | Payment processing as merchant of record | Billing and payment details, collected by the provider directly |
We disclose personal data to a public authority only where the law requires it. If the Service is transferred to a successor, account data transfers with it under this policy, and we will tell you beforehand.
7.International Transfers
Our providers store and process data on networks that span several countries, so your data may be processed outside the country where you live, including in the United States.
Where data protection law requires a safeguard for such a transfer, we rely on the provider's standard contractual clauses or an equivalent mechanism recognised by that law.
8.Retention
| Data | Kept for |
|---|---|
| Account data, saved searches and settings | Until you delete the account. Deletion is immediate. |
| Sessions | 30 days, or until you sign out |
| Sign in links | 30 minutes |
| Sign in attempt counters | About one day |
| Free digest list entry | Until you unsubscribe |
| Payment records | As long as tax and accounting law requires |
| Email correspondence | Up to two years after the last message |
9.Security
All traffic to the site is encrypted in transit. Passwords are stored as salted scrypt hashes. Session tokens and sign in links are stored only as hashes, so a copy of the database cannot be used to sign in. Sign in attempts are rate limited.
No system is completely secure. If a breach of personal data is likely to put your rights at risk, we will tell you and the competent authority as the law requires.
10.Your Rights
Subject to the law that applies to you, you have the right to:
- access the personal data we hold about you and receive a copy
- have inaccurate data corrected
- have your data erased
- restrict or object to our processing
- receive your data in a portable format
- withdraw consent at any time, where processing rests on consent
You can exercise several of these yourself. Change your settings or delete your account on the account page, and leave the free digest list on the unsubscribe page.
For any other request, email hello@spacetenders.com from the address concerned. We respond within one month and make no charge.
If you live in the European Economic Area or the United Kingdom, you may also complain to your data protection authority. If you live in California, you have the rights to know, delete and correct set out above, and we do not sell or share personal information as those terms are defined in California law.
11.Children
The Service is intended for professional use by adults. It is not directed at anyone under 18, and we do not knowingly collect personal data from children.
12.Changes to This Policy
We update this policy when we add a service provider or change what we collect. The date at the top of the page shows the current version, with a note of what changed. We email account holders before a material change takes effect.
13.Contact
Privacy questions and requests go to hello@spacetenders.com. Other routes are on the contact page.